CVE-2012-6500

CVE-2012-6500 (Pragyan CMS) affects Pragyan CMS 3.0 and earlier. A directory traversal flaw in download.lib.php allows remote attackers to read arbitrary files by submitting .. in the fileget parameter within the profile action to index.php. The underlying issue is a path traversal vulnerability ...